Teleflora Data Breach Lawsuit Filed Over 2023 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Teleflora faces a proposed class action lawsuit over a data breach announced in March 2024 that compromised the personal information of more than 12,000 current and former customers.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The 73-page Teleflora data breach lawsuit alleges that the Los Angeles-based flower delivery services company negligently failed to protect consumers’ names and Social Security numbers during a cyberattack in which an unauthorized third party gained access to certain files stored in Teleflora’s computer network.

According to the data breach lawsuit, the incident—detected by the company in early November 2023—stemmed directly from Teleflora’s failure to implement adequate cybersecurity protocols to safeguard customer information, which was allegedly stored unencrypted and unredacted in the defendant’s systems.

In addition, the case takes issue with Teleflora’s March 2024 notice letter, arguing that it was unreasonably delayed and lacked essential details about the data breach. The complaint claims, for example, that the notice failed to explain precisely how and when cybercriminals gained access to the network, who was behind the cyberattack, why Teleflora waited so long before notifying victims and what steps are being taken to secure stored information in the future.

As the filing tells it, the company has apparently offered impacted individuals 12 months of complimentary identity monitoring services. The lawsuit charges that this gesture is “wholly inadequate” to compensate victims as they now face a lifelong risk of fraud, identity theft and other illegal schemes as a result of the unauthorized disclosure of their personal data.

“Moreover, once this service expires, [the plaintiff] and Class Members will be forced to pay out of pocket for necessary identity monitoring services,” the suit points out.

The lawsuit looks to represent anyone in the United States whose private information was accessed and/or acquired by an unauthorized third party as a result of the data breach reported by Teleflora in March 2024.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.